Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
File:                     pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json)
Hash identifier:          6538uKBUznVJDjR1h/dQbygmADQq34ppCkmvy8mFpGs=
Subject key identifier:   45:87:AA:99:4B:44:4F:64:5D:48:67:A4:CA:63:D1:7B:E5:3A:8B:81
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Certificate issuer:       /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial:       042E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
Manifest number:          03F0
Signing time:             Mon 27 Jul 2026 01:44:06 +0000
Manifest this update:     Mon 27 Jul 2026 01:44:06 +0000
Manifest next update:     Mon 03 Aug 2026 01:44:06 +0000
Files and hashes:         1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: aVesFUKBsokNfbGCZFzCnN3itBXkNfzHyEN3+DW0wc4=)
                          2: E31040027AA211F1A7425D4B5FA30FBC.roa (hash: R/9K4K6QZffUa+A09UevR5/cUaVC0oy01ZOS/2cVFB0=)
                          3: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: piqd3okCbVlFKjEolLFOOOARynspzmzOHcnRRet9yBg=)
                          4: 5EDCA5AC61BE11F1BC6CC5449047A888.roa (hash: RfyGAa3qye+BMhRuql0Q61Dpnspsmt7EFQ2dI7Ec2g0=)
                          5: 2E8796D201D811F1B1EB0BE0366F56BC.roa (hash: rCc2LJ3SHarCzukGEVF7yiv4Jot6jNEMODiytpZTHFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
        Validity
            Not Before: Jul 27 01:44:06 2026 GMT
            Not After : Aug  3 01:44:06 2026 GMT
        Subject: CN=6a66b7e6-9c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:b1:67:79:14:67:2b:16:09:26:bd:07:b4:
                    8c:b0:5b:a3:90:67:d3:2a:56:b9:c1:41:9a:4a:f5:
                    20:21:44:58:72:5b:c2:d1:d3:4d:cf:7a:1b:44:38:
                    b4:46:00:5c:a0:98:6b:6f:fc:ff:da:b6:2d:6a:ba:
                    74:a5:c6:d5:ee:46:a3:0f:99:ae:34:84:7e:0f:19:
                    c8:63:75:5d:8d:cb:ee:58:07:ca:80:18:35:23:39:
                    b7:15:3d:08:2d:42:f0:fb:3f:f8:00:96:ed:33:36:
                    0b:6b:4c:90:1b:5c:ee:ec:e7:97:c4:20:01:1f:93:
                    ad:67:ab:84:00:1d:a4:e7:fb:8c:e3:37:9a:48:f7:
                    72:60:3f:07:bf:af:8c:10:ce:fd:22:6e:fc:4c:6d:
                    ae:e8:72:95:45:e4:30:1c:71:ef:23:e2:f3:e3:1d:
                    fd:02:65:f3:00:ea:4a:20:d9:15:72:a4:84:f9:b5:
                    cc:dd:c9:95:f9:f3:68:ab:4f:93:8f:bf:51:a3:65:
                    f7:57:66:f9:dc:5a:78:b9:64:75:15:4a:e0:98:ff:
                    f1:07:e8:30:31:28:4b:0c:1c:d5:fd:63:9a:d0:f3:
                    be:c6:01:3f:56:1e:93:69:82:dd:a3:c8:dd:c6:e1:
                    25:c8:4a:bd:de:bb:05:3b:f9:84:13:fd:3e:72:76:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:87:AA:99:4B:44:4F:64:5D:48:67:A4:CA:63:D1:7B:E5:3A:8B:81
            X509v3 Authority Key Identifier:
                keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:15:30:70:71:77:c0:a8:e6:4c:2b:c0:f6:7f:5d:55:a2:82:
         65:c0:df:cd:62:76:0e:cb:f7:95:76:21:fc:43:9c:d5:5f:44:
         c5:19:1e:28:15:22:9b:00:c7:d0:59:a2:bd:45:b5:f2:60:3e:
         25:85:a4:66:61:b2:12:b2:a5:04:cf:f9:f3:87:d5:98:5f:51:
         6c:2a:b6:ca:1f:53:65:9a:1a:4e:9a:66:7e:80:2b:c1:89:f4:
         21:ba:7d:cd:9b:6c:e6:01:92:7c:22:d5:0a:62:86:0b:7b:67:
         8f:14:9e:41:cf:06:bc:08:44:3a:41:e3:a9:2e:38:93:c0:ac:
         dc:86:90:bd:88:30:7d:7d:3f:fa:50:c7:6f:6b:2b:21:b1:57:
         9a:3d:50:6e:2c:1a:39:3b:d4:8a:56:20:c5:9a:47:2e:07:1a:
         5a:e3:12:55:72:de:36:cc:9b:ac:36:0e:dc:07:62:4c:ff:81:
         ed:56:e8:14:ab:6e:52:7b:1c:76:50:49:5c:26:f5:b4:82:da:
         7b:4a:bb:59:3b:2a:c5:f0:85:46:d9:ff:b1:29:bf:38:6b:e8:
         f1:01:9e:31:74:b8:7e:a5:86:ed:19:11:2a:6a:5c:50:33:c0:
         42:48:64:1d:54:4a:7e:dd:8d:10:d7:e5:2d:92:10:9f:32:17:
         8a:d5:0c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:55 2026 by rpki-client